Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
File: 2m5vOSJxlRs1NH-s1RP5Mv5noME.mft (raw, json)
Hash identifier: mqLSWd+PGxppLrJ8qILsXgs1gMV8+UEDxAkDhr0+/Ek=
Subject key identifier: 98:FA:7C:42:5B:E8:AF:D0:E6:8C:24:7F:86:81:99:B9:EB:2C:10:B8
Authority key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
Certificate issuer: /CN=da6e6f392271951b35347facd513f932fe67a0c1
Certificate serial: 0198D7A946C872282226B01136A18313F4FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 16:00:51 +0000
Manifest this update: Sat 23 Aug 2025 16:00:51 +0000
Manifest next update: Sun 24 Aug 2025 16:00:51 +0000
Files and hashes: 1: 2m5vOSJxlRs1NH-s1RP5Mv5noME.crl (hash: HoHmkCkF4TYwRFDNWZzCQkdVQP0538I9W1yQcDeMOoU=)
2: OW4gp2pM3Cn0hQw10Qy5ZXKaWok.roa (hash: iuq6/QV3l3hvs9FmkGJh3GnqU/CQ9A049Iob+yz2Lzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:46:c8:72:28:22:26:b0:11:36:a1:83:13:f4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6e6f392271951b35347facd513f932fe67a0c1
Validity
Not Before: Aug 23 16:00:51 2025 GMT
Not After : Aug 24 16:00:51 2025 GMT
Subject: CN=98fa7c425be8afd0e68c247f868199b9eb2c10b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bf:4f:72:1d:bf:07:0c:bb:4d:87:f2:f8:22:
b6:6e:bc:24:a6:e3:dc:bd:4b:b1:1f:9c:91:5b:13:
02:15:43:0d:25:c9:9b:0f:8c:1c:1e:dc:f5:fc:2d:
09:31:e0:5c:6e:c5:31:86:06:52:bb:8c:28:8b:8c:
ee:95:65:69:8b:45:54:9f:f1:f7:70:4f:96:b3:c1:
75:f7:ef:ab:1c:1f:2d:8e:d5:6f:0a:5b:f0:c9:d3:
a7:af:d0:96:0e:08:0f:9d:ba:f2:93:0f:3d:06:35:
8d:f1:fd:5d:62:50:ca:b8:dc:bd:6e:c8:9a:b8:04:
66:bb:f0:61:c9:d2:86:c3:70:fd:85:99:96:97:4b:
f0:96:0e:d2:23:d1:aa:51:12:eb:33:f3:51:f8:15:
b2:92:e5:63:a5:bd:15:6b:61:7e:9e:66:c2:04:b9:
34:f5:d4:00:f1:10:62:1c:30:41:03:ef:92:05:74:
4b:bf:83:28:fb:90:9e:3c:82:ed:0a:2d:77:e8:3f:
ad:c5:3a:cd:74:2c:33:87:64:78:07:6b:89:8d:44:
7d:74:85:28:7f:73:58:9f:88:7c:7d:87:c4:b2:43:
4f:d9:6f:28:a0:b4:3d:58:bd:d2:75:96:c2:ff:11:
b5:28:20:f8:1a:cb:ea:75:77:2b:14:af:98:20:e0:
a2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FA:7C:42:5B:E8:AF:D0:E6:8C:24:7F:86:81:99:B9:EB:2C:10:B8
X509v3 Authority Key Identifier:
keyid:DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:0f:f0:60:93:ff:bc:b0:ad:ec:ef:81:c7:d9:11:3c:b4:64:
4b:99:db:76:68:8b:5f:86:ff:7c:93:6f:63:2a:8e:4d:ef:4b:
42:c1:5b:e8:37:79:0f:e8:1b:49:4c:3d:c3:e7:b6:75:b2:61:
73:a5:77:65:f2:c9:66:9e:e4:5e:17:7d:d5:90:94:84:40:65:
18:e1:11:3a:32:99:fc:80:9c:94:26:af:08:6a:3b:70:e8:4b:
46:6d:2c:a6:7a:03:92:08:a1:07:f9:0a:f2:fa:7c:84:4f:7d:
a6:38:65:58:71:c0:41:3c:2e:c0:aa:af:50:d8:7b:9f:7e:f3:
3f:f5:0d:fb:f6:99:0e:22:10:d3:13:7b:e2:71:37:44:06:56:
7f:e4:65:12:88:46:95:2d:2c:c8:60:6d:f7:e1:af:b9:33:7f:
8b:91:51:ed:2b:94:2e:83:28:dd:4d:37:57:39:1f:f6:dd:d9:
d5:2a:42:3f:c7:ff:5d:77:f5:90:80:bc:f7:4b:ee:1a:fa:f9:
a8:6e:ab:a0:f3:93:07:01:7a:71:8d:77:ae:a9:82:a0:32:93:
d2:fc:f1:b6:1c:ba:37:fa:e0:24:1a:2d:c7:5d:34:2f:20:f9:
d9:a1:6c:35:f8:5e:95:26:98:fb:9b:1f:cc:9f:a7:83:c4:7e:
de:21:86:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:47 2025 by rpki-client